feat(docker-image)!: Update nginx Docker tag to v21

firewall-s3/ks-vm.yaml

@@ -7,7 +7,7 @@ spec:
   commonMetadata:
     labels:
       app.kubernetes.io/name: *app
-  path: ./firewall-s3
+  path: ./firewall-s3/vm/ksd
   prune: true
   sourceRef:
     kind: GitRepository

firewall-s3/test-connectivity/network-definitions/lan.yaml

@@ -1,20 +0,0 @@
-# apiVersion: "k8s.cni.cncf.io/v1"
-# kind: NetworkAttachmentDefinition
-# metadata:
-#   name: lan-net
-#   namespace: ${TENANT_NAMESPACE}
-# spec:
-#   config: '{
-#     "cniVersion": "0.3.1",
-#     "type": "bridge",
-#     "bridge": "br-lan",
-#     "ipam": {
-#       "type": "static",
-#       "addresses": [
-#         {
-#           "address": "172.168.100.2/24",
-#           "gateway": "172.168.100.1"
-#         }
-#       ]
-#     }
-#   }'

kustomization.yaml

@@ -4,9 +4,8 @@ resources:
   - vars/ks.yaml
   - repos/ks.yaml
   - network/ks-lb.yaml
-  - firewall/ks-vm.yaml
-  - firewall-dev/ks-vm.yaml
   - firewall-s3/ks-vm.yaml
+  - test-connectivity/ks.yaml
   - windows-vm-standard/ks-vm.yaml
   - windows-vm-standard/ks-pvc.yaml
   - windows-vm-standard-dev/ks-vm.yaml

test-connectivity/app/test-connectivity/network-definitions/lan.yaml

@@ -0,0 +1,19 @@
+apiVersion: k8s.cni.cncf.io/v1
+kind: NetworkAttachmentDefinition
+metadata:
+  name: lan-ovn-160
+spec:
+  config: |
+    {
+      "cniVersion": "0.3.1",
+      "type": "ovn-k8s-cni-overlay",
+      "name": "lan-ovn-160",
+      "topology": "layer2",
+      "subnets": [
+        {"cidr": "192.168.160.0/24"}
+      ],
+      "mtu": 1400,
+      "routes": [
+        {"dst": "10.60.0.0/16", "gw": "192.168.10.1"}
+      ]
+    }

test-connectivity/app/test-connectivity/pod/pod.yaml

@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dualnet-pod-ovn
+  annotations:
+    k8s.v1.cni.cncf.io/networks: |
+      [
+        {
+          "name": "lan-ovn-160",
+          "namespace": "${TENANT_NAMESPACE}",
+          "interface": "net1"
+        }
+      ]
+spec:
+  containers:
+    - name: toolbox
+      image: quay.io/centos/centos:stream9
+      command: [ "/bin/bash", "-c", "sleep infinity" ]
+  restartPolicy: Never

test-connectivity/ks.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app test-connectivity
+  namespace: ${TENANT_NAMESPACE}
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  path: ./test-connectivity/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: tenant-repos
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m